Top Tech Jobs & Startup Jobs in Charlotte, NC

Conduct advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Identify and exploit novel, systemic, and chained vulnerabilities; develop proof-of-concept exploits, testing methodologies, and research automation; assess AI attack vectors and open-source dependencies; drive remediation and security improvements; advise engineering teams, contribute to roadmaps, mentor researchers, and share findings with the security community.

Conducts advanced application security research across GitLab’s DevSecOps and AI-powered platforms. Responsibilities include discovering and exploiting systemic vulnerabilities, penetration testing, developing proof-of-concept exploits, researching AI and agentic security threats, building automated research tooling, coordinating remediation, mentoring security professionals, and communicating findings to engineering and security communities.

Lead public sector security compliance initiatives, including FedRAMP continuous monitoring, audits, certifications, GRC strategy, compliance automation, documentation, customer support, and regulatory analysis. Collaborate with IT, Product, Engineering, Security, Legal, auditors, and government customers to strengthen compliance across GitLab’s SaaS and self-managed offerings.

Lead GitLab’s talent brand strategy and employer value proposition across the candidate journey. Develop integrated recruitment marketing campaigns, editorial content, recruiter resources, events, and scalable content systems. Partner with Talent Acquisition, Marketing, Communications, and business leaders to support hiring priorities and improve candidate experiences. Use performance data, audience insights, feedback, and market trends to evaluate campaigns, guide priorities, and increase candidate engagement and conversion.

The Talent Brand Manager will shape GitLab’s employer brand through recruitment marketing, storytelling, campaigns, and candidate education. Responsibilities include translating the employer value proposition into messaging, creating cross-channel campaigns and team-member stories, improving candidate journey touchpoints, analyzing funnel and engagement metrics, and partnering with Talent Acquisition and cross-functional stakeholders. The role also manages projects and external partners while improving talent brand processes, reporting, and operations in a fully remote environment.

Designs, documents, tests, and maintains IT general and security controls across corporate, engineering, SaaS, and cloud-native systems. The role maps controls across SOX, SOC 2, ISO, NIST, PCI-DSS, privacy, and contractual requirements; manages audits, access reviews, change-management testing, remediation, policy work, and evidence automation. It also establishes governance standards for enterprise AI use and partners with IT, Security, Engineering, Finance, Legal, Privacy, and auditors.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Provides cross-team technical leadership for complex backend initiatives, modular architecture, monolith modernization, API and platform standards, production operations, and AI-assisted engineering adoption. Designs shared patterns for services, data, eventing, security, testing, observability, deployment, and reliability. Partners with Product and Engineering leadership, mentors engineers, participates in incident response, and drives technical strategy without formal authority.

Delivers federal GitLab implementation work across FedRAMP, DoD, classified, and air-gapped environments. Installs, configures, upgrades, hardens, troubleshoots, and migrates GitLab deployments; supports compliance authorization; leads technical workshops; documents runbooks and automation; manages delivery risks; and collaborates with government stakeholders, architects, Product, and Engineering.

Build, test, ship, and operate production backend features with minimal guidance. Design APIs, background jobs, integrations, data models, migrations, and bounded services while maintaining security, performance, observability, and reliability. Review code, improve automated testing, investigate production issues, address technical debt, participate in operational support, and collaborate asynchronously with product, frontend, infrastructure, and security teams. Use AI coding tools responsibly by validating and correcting generated output.